Configuring Certificate Authorities - Juniper NETWORK AND SECURITY MANAGER 2010.3 - ADMINISTRATION GUIDE REV1 Administration Manual

Network and Security Manager Administration Guide

Configuring Certificate Authorities

416
Deleting a Destination NAT Object
To delete a destination NAT object:
Select
Object Manager
1.
dialog box appears.
Select a destination NAT object to delete.
2.
Select the Delete icon (
3.
The Delete JunosDestination NAT Destination NAT-object name
Click .
4. Next
If you have referenced this object, then all referenced areas are displayed as links in
this dialog box. Click on a link to navigate to the area where this object is referenced.
You can proceed with or cancel the deletion. If the deletion is successful, the following
message appears in the dialog box:
Deleted Destination NAT-object name
Click .
Finish
5.
A digital certificate is an electronic means for verifying your identity through the word of
a trusted third party, known as a Certificate Authority (CA). NSM simplifies creating and
managing certificates:
Use the same CA server for multiple devices. Create a single CA object for each CA
server you use, then use that object for those devices.
Generate a local and CA certificate in one click using SCEP.
Use OCSP to automatically check for revoked certificates (ScreenOS 5.0 or later
devices only)
Use a certificate chain that includes a root CA and subordinate CA (CA group)
A CA object represents the CA server you want to use to authenticate the identity of your
VPN member. You can use an independent or internal CA server:
Independent CA server—Owned and operated by an independent CA. The independent
CA provides the IP addresses of their CA and CRL servers. You submit a local certificate
request to the independent CA and provide your local certificate information.
Internal CA server—Owned and operated by your company. You provide the IP addresses
of the CA and CRL servers and local certificate information.
You can obtain a CA certificate file (.cer) from the CA that issued the local certification,
then use this file to create a Certificate Authority object. Then, install this CA certificate
on the managed device using NSM. Because the CA certificate is an object, however, you
can use the same CA for multiple devices, as long as those devices use local certificates
that were issued by that CA.
> >
Junos NAT Objects Destination NAT
) at the top of the screen.
-
.
. The
Destination NAT
dialog box appears.
Copyright © 2010, Juniper Networks, Inc.